gcloud alpha iam service-accounts keys get-public-key

NAME
gcloud alpha iam service-accounts keys get-public-key - get the public key for a service account key pair
SYNOPSIS
gcloud alpha iam service-accounts keys get-public-key KEY-ID --iam-account=IAM_ACCOUNT --output-file=OUTPUT_FILE [--type=TYPE; default="pem"] [GCLOUD_WIDE_FLAG …]
DESCRIPTION
(ALPHA) Get the public key for a service account key pair in pem or raw format.
EXAMPLES
To get the public key for some key ID for some service account (to validate a blob or JWT signature, for example), run: 
gcloud alpha iam service-accounts keys get-public-key keyid --output-file=key-file --iam-account=my-iam-account@my-project.iam.gserviceaccount.com
POSITIONAL ARGUMENTS
KEY-ID
The key to get.
REQUIRED FLAGS
--iam-account=IAM_ACCOUNT
A textual name to display for the account.
--output-file=OUTPUT_FILE
The output file to write the public key.
OPTIONAL FLAGS
--type=TYPE; default="pem"
The type of the public key to get. TYPE must be one of: pem, raw.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES
This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist. This variant is also available: 
gcloud beta iam service-accounts keys get-public-key